Data Treatment

PRIVACY POLICY

This Privacy Policy is defined on the basis of art. 13 of EU Regulation n. 679/2016 and applies only to all data collected through the www.lgrworld.com. website. This Privacy Policy is subject to updates that will be posted on the website on time. The present Privacy Policy, as well as any other documents referred to therein and the Cookie Policy, establishes the basis on which the user’s personal data will be processed.

Data Controller

The Data Controller of this website is è L.G.R. S.r.l., Roma (RM), 00161, Piazza Lecce n. 4, P.IVA 10436671001, email: [email protected].

Personal Data

Personal Data means any information relating to an identified or identifiable natural person (Data Subject, User). An identifiable natural person who may be identified, directly or indirectly, with particular reference to an identifier such as name, identification number, location data, an on-line identifier, one or more characteristic elements of his physical identity.
Category of personal data processed
Among the personal data processed by this website, autonomously or by third party, there are common data like: Cookies, usage data, name, surname, address, city, gender, email, phone, tax data useful for purchasing and personal data useful for the delivery of the purchased product.

Methods of personal data processing

The personal data provided or acquired are subjected to a treatment based on principles of correctness, lawfulness, transparency and protection of privacy pursuant to current legislation. The Data Controller processes the user’s personal data adopting appropriate security measures to prevent unauthorized access, disclosure, modification or unauthorized destruction of personal data. Data are processed by means of IT and/or telematic tools, by implementing organizational methods and strategies that are connected to the purposes of the activity.

Purposes for processing the collected data and legal basis

Personal data can be collected autonomously by the Data Controller or by third party. In this case, the computer systems and software used by the website acquire certain user’s personal data, IT related (for example, the IP address, the browser used, the operative system, the domain name and the websites addresses from which you have accessed or exit, etc.), whose transmission is inherent to the correct functioning of Internet. Such data can be processed for the sole purpose of obtaining anonymous statistical information on the use of the website and/or controlling its correct functioning; after their processing, they are immediately erased. The Data that the user chooses to provide spontaneously will be processed in compliance with the conditions of lawfulness pursuant to art. 6 GDPR and will be processed to allow the Website to provide its services, as well as for the Purposes indicated below and will be retained for the time necessary for the fulfillment of the aforementioned Purposes.
The purposes of the processing are:

a) Pre-contractual information and compliance
The Data will be processed in order to contact or to respond to specific requests addressed to the Data Controller by the Data Subject for communications of an informative nature and/or for the interest in the purchase in relation to the Products of the Data Controller, via email messages or filling in the contact form and other communication tools such as phone, instant messaging WhatsApp Business, live chat.
Legal basis: this processing is optional and based on the consent of the Data Subject, however the provision of Data is necessary for the pursuit of the purpose indicated.
Data retention period: until the Data Subject’s consent is withdrawn.

b) Processing required under a contract
The Data will be processed to fulfil any kind of obligation required by the contract between the user and the Data Controller for the sale of the Products/Services offered on the website, to provide information required by the user, to contact the user in relation to the contract and for its management, the management of statutory warranty claims, assistance, requests for withdrawal, management and termination of the contract.
Legal basis: this processing is mandatory for the execution of the contract to which the User is a party, for the execution of pre-contractual measures or to fulfil a legal obligation to which the Data Controller is subject;
Data retention period: 10 (ten) years or different legal obligation.

c) Fulfillment of any obligations provided by current laws
The Data will be processed to fulfill any type of obligation contemplated and provided for by current laws, regulations, related regulations, commercial uses and tax/tax matters, including also for the purposes provided for by the anti-money laundering legislation d.lgs. 231/2007 and subsequent amendments.
Legal basis: this processing is necessary to fulfil a legal obligation to which the Data Controller is subject.
Data retention period: 10 (ten) years or different legal obligation.

d) Softspam
The Data will be processed to allow the Data Controller to send the user via e-mail promotional communication concerning Products and/or Services purchased without the need for the express and prior consent of the user, as required by art. 130, paragraph 4, Code of Privacy, and provided that the user does not exercise the right of opposition. This processing is based on art. 130, paragraph 4 of the Code of Privacy as told by Legislative Decree no.101 of 2018.
Legal basis: this processing is based on the legitimate interest of the Data Controller pursuant to art. 6, lett. F and Recital No. 47 of the GDPR.
Data retention period: until the Data Subject objects.

e) Marketing
The Data will be processed for direct sale of Products/Services, market research, sending of communications and promotional, commercial and advertising or related initiatives and events, via newsletter, e-mail, SMS, WhatsApp, Chat, Direct Messaging by social media, social network or by telephone calls, paper mail and other information material.
Legal basis: this processing is based on the consent freely expressed by the interested party pursuant to art. 6, par. 1, lit. A of the GDPR.
Data retention period: until the Data Subject’s consent is withdrawn.

f) Statistical analysis
The Data will be processed to perform statistical analysis on aggregated and anonymous data to analyze the behavior of the Data Subject to improve the products and services provided by the Data Controller and to meet the expectations of the Data Subject.
Legal basis: this processing is based on the consent freely expressed by the interested party.
Data retention period: until withdrawal of consent by the Data Subject.

g) Profiling activities
The Data will be processed for the analysis and evaluation of interests, habits, consumer choices, including the creation of profiles in order to be able to send personalized information and promotional material on the Services/Products offered by the Data Controller.
Legal basis: this processing is based on the consent freely expressed by the interested party pursuant to art. 6, par. 1, lit. A of the GDPR.
Data retention period: until the Data Subject’s consent is withdrawn.

Data communication

In some cases, in addition to Data Controller, may have access to data:
a) categories of persons specifically trained involved in the organization of the website (administrative staff, commercial staff, marketing staff, lawyers, system administrators);
b) external parties (like third party technical service providers, hosting provider, IT companies, communication agencies) also appointed as Data Processors by the Data Controller ex art. 28 GDPR. The updated list of Data Processors, if appointed, can always be requested from the Data Controller;
c) public or private entities that can access the data in compliance with legal obligations;
d) subjects that perform instrumental tasks with respect to the activity of the Data Controller;

Processing time

As expressly stipulated by art. 5, co. 1, lett. e) of the GDPR, data are stored for a period of time necessary to provide the service requested by the user, or for the time required for the purposes described in this document.
At the end of the storing time, personal data will be deleted and consequently access rights, deletion rights, rectification rights and data portability rights can no longer be exercised.

Cookies

This website uses Cookies. They are small text files that may be used by websites to make the user’s experience more efficient, to customize contents and advertisements, to provide the functions of the social networks and analyze the traffic. Cookie Policy

Place of processing and transfer of data abroad

The data are processed at the Data Controller’s operating office. For more information, contact the Data Controller. The data can be processed by natural persons and/or legal entities acting on behalf of the Data Controller, under specific contractual obligations and located in UE or non-UE countries. If the data are transferred outside the EEA, the Data Controller will adopt any contractual measure suitable to ensure an adequate data protection.

Exercise of the rights of the data subject

The data subject may exercise the rights as described in the artt. 7, 15-22 of the EU Regulation 679/2016. In particular, the right to withdraw his/her consent in any time and, simply asking the Data Controller, he/she may request access to personal data, receive the personal data provided by the Data Controller and, where possible, transmit them to another Data Controller of the processing without impediment (c.d. portability), obtain the update, the limitation of the processing, the rectification of data and the deletion of that processed in contrast with current legislation. The data subject has the right, for legitimate reasons, to oppose the processing of personal data concerning him/her the processing for purposes of sending advertising materials, direct selling and market research. The interested party also has the right to lodge a complaint with the Privacy Authority in its quality of supervisory authority. The data subject may exercise the rights by emailing the owner at: [email protected].

Tools used for personal data processing

CONTACT FORM

The user, filling in the contact Form with his/her data, agrees to their use to answer any request of information or any other purpose indicated by the form header. Personal data collected by the contact Form: email, name and surname, telephone number, address, city.

OTHER CONTACT TOOLS

WhatsApp Business
WhatsApp Business is an instant messaging service provided by WhatsApp Ireland Limited. For the purposes of processing, we also refer to the Terms for the processing of the data of WhatsApp Business available at the following link: https://www.whatsapp.com/legal/business-data-processing-terms/. The user’s data will circulate in the WhatsApp Business services according to the terms that WhatsApp reports in the document “WhatsApp Business Terms of service” at the following link: https://www.whatsapp.com/legal/business-terms/ . Personal data collected: telephone number, email, usage data, Cookies. Place of processing: Ireland- Privacy Policy (https://www.whatsapp.com/legal?eea=0#privacy-policy)

Chat
To manage the information requests with the users. This website uses a chat service provided by:

Live chat (LiveChat, Inc)
Live chat is a service offered by LiveChat Inc. that allows to manage the communication of its own commercial offers. Live chat may use different tools to gather and archive information when the services of the website are used and that may include the use of cookies and similar tracking technologies. Place of processing: the USA – Privacy policy (https://www.livechat.com/legal/privacy-policy/)

EMAIL ADDRESSES MANAGING

These services permit to manage a database of email contacts, telephone contacts or contacts of any other type, used to communicate with the user. Furthermore, these services could permit to collect data related with user’s date and time of viewing of messages, as well as track user’s interaction with them, such as information on clicks on the links included in the messages.

By subscribing to the newsletter, the user’s email address is automatically added to a list of contacts to which email messages containing information, including commercial and promotional information, relating to this website may be transmitted. The user’s email address might also be added to this list as a result of signing up to this website or after making a purchase. The user can choose at any time to unsubscribe from the newsletter by clicking on a specific button he/she will find within the emails. After clicking the button, the user’s data will be immediately deleted by the “email marketing” software. Personal data collected: email and name. This website uses the newsletter service offered by:

ActiveCampaign (Active Campaign LLC)

ActiveCampaign, LLC (” ActiveCampaign “) provides a newsletter platform that allows the Data Controllers to reach their customers, understand the way they interact with that communication and with other contents, and to customize the on the basis of their interests. The user can choose at any time to unsubscribe from the newsletter by clicking on a specific button he/she will find within the emails. After clicking the button, the user’s data will be immediately deleted. Personal data collected: email and name. Place of processing: the USA – Privacy Policy (https://www.activecampaign.com/legal/privacy-policy)

REGISTRATION ON THE WEBSITE

With the registration service the user allows the website to identify her/him and give her/him access to the services dedicated. Registration and authentication shall be carried out by
Direct registration
The user registers directly on the website by filling out the form and providing her/his own data.

STATISTICS

Statistics services allow the Data Controller only to monitor and analyze the traffic data and keep track of the user’s behavior. This website uses the following services:

1. Google Analytics (Google Ireland Limited)
Google Analytics is an analysis service offered by Google Ireland Limited. Google uses the collected personal data with the aim of tracking and examining the use of this website, compiling reports and sharing them with other services developed by Google. Google may use the personal data collected to contextualize and personalize notices on its advertising network. Google can also transmit this information to third parties in case there are any legal requirements or in cases where such third parties process the information on Google’s behalf. On this website the function of anonymization of the IP address is active. The IP address transmitted by the browser for purposes connected to Google Analytics will not be embedded with other data that Google already possesses.
At the following link https://tools.google.com/dlpage/gaoptout?hl=it Google provides the Google Analytics Opt-Out Browser Add-on to disable tracking by Google Analytics. Personal data collected: Cookies and usage data. Place of processing: Ireland – Privacy Policy (https://policies.google.com/privacy?hl=en)

2. Facebook Conversion Pixel monitoring (Meta Platforms, Inc.)
Facebook Conversion Pixel monitoring (Facebook pixel) is a statistical service offered by Facebook. The Facebook pixel monitors conversions that can be attributed to Facebook ads. Personal data collected: Cookies and usage data. Place of processing: Ireland – Privacy Policy. (https://www.facebook.com/about/privacy/)

3. Google Search Console (Google Ireland Limited)
Google Search Console is an analysis service offered by Google Ireland Limited. Google uses the collected personal data with the aim of tracking and examining the use of this website, compiling reports and sharing them with other services developed by Google. Google may use the personal data collected to contextualize and personalize notices on its advertising network. Google can also transmit this information to third parties in case there are any legal requirements or in cases where such third parties process the information on Google’s behalf. Personal data collected: Cookies and usage data. Place of processing: Ireland – Privacy Policy (https://policies.google.com/privacy?hl=en)

4. Hotjar (Hotjar Ltd)
Hotjar is a statistical service that allows the Data Controller to monitor the conversions of her/his customers and register sessions. At the following link https://www.hotjar.com/privacy/do-not-track/ Hotjar provides the browser add-on for Do not track. Personal data collected: Cookies and usage data. Place of processing: Malta – Privacy Policy (https://www.hotjar.com/privacy/)

5. Metrilo (Metrilo LTD)
Metrilo is a service that allows the Data Controller to monitor the conversions of its customers. Personal Data collected: Cookies; Usage Data. Place of Processing: UK – Privacy Policy (https://www.metrilo.com/terms-and-conditions – https://www.metrilo.com/privacy-policy)

Google Tag manager (Google Ireland Limited)

Google Tag manager is a service that allows to manage and monitor all the Tags of third parties on the website to get information about the interest demonstrated by the users towards the website and, consequently, towards the quality of the contents. Personal data collected: Cookies and usage data. Place of processing: Ireland – Privacy Policy (https://policies.google.com/privacy)

INTERACTION WITH SOCIAL NETWORKS

These services allow to interact with social networks directly from the website pages. The interactions and information acquired by this website are subject to the user’s Privacy Policy of each social network. If a service for interaction with social networks is installed, the site may collect traffic data about the pages, even if users do not use the service.

1. Facebook (Meta Platforms, Inc.)
The Facebook buttons are services for interaction with Facebook, offered by Meta Platforms, Inc. Personal data collected: Cookies and usage data. Place of processing: Ireland – Privacy Policy (https://www.facebook.com/privacy/explanation)

2. Instagram (Meta Platforms, Inc.)
The Facebook buttons are services for interaction with Instagram, offered by Meta Platforms Inc. Personal data collected: Cookies and usage data. Place of processing: Ireland – Privacy Policy (https://help.instagram.com/519522125107875)

3. Pinterest (Pinterest Europe Ltd)
The Pinterest buttons are services for interaction with Pinterest, offered by Pinterest, Inc. Personal data collected: Cookies and usage data. Place of processing: Ireland – Privacy Policy (https://policy.pinterest.com/it/privacy-policy)

4. Tik Tok (TikTok Technology Limited)
The Tik Tok buttons are services for interaction with the social network provided by Tik Tok Technology Limited. Personal data collected: Cookies and usage data. Place of processing: Ireland – Privacy Policy (https://www.tiktok.com/legal/new-privacy-policy?lang=en-EN)

5. Youtube (Google Ireland Limited)
Youtube buttons are interaction services with the video content display service managed by Google. Personal Data collected: Cookies and Usage Data. Place of Processing: Ireland – Privacy Policy (https://policies.google.com/privacy?hl=en)

REMARKETING E RETARGETING

These services allow this website to communicate, optimize and serve advertising based on the past use of this website by the user. This activity is carried out by tracking of usage data and the use of Cookies. This website uses the following services:

1. Facebook Remarketing (Meta Platforms, Inc.)
Facebook Remarketing is a service of Remarketing and Behavioral Targeting offered by Facebook, that links the activity of this website with the Facebook advertising network. This website makes use of Facebook Pixel in order to measure conversions. Thanks to Facebook Pixel we can understand the actions people perform on this website. Data collected can be used for:
– making sure the ads are shown to the right people;
– creating public groups to use advertisements for;
– exploiting the additional advertising tools of the platform on which advertising is made.
Collected information is anonymous to the operators of this website and cannot be used to determine the identity of a single user. However, information is stored and analyzed by Facebook, which might relate the action to a single profile and use this information for internal Facebook advertising purposes, as outlined by the Privacy Policy of Facebook. This will allow Facebook to show ads on both Facebook and third-party websites. The website owner does not have any control over the use of these data. For more information on how users can protect their privacy, refer to the Facebook Privacy Policy. (https://www.facebook.com/about/privacy/)

2. Google ADS
Google ADS is a service provided by Google Ireland Limited that links this website with the Google advertising network. This website makes use of the Remarketing functionalities of Google Analytics combined with the possibility of adaptation to different devices of Google ADS. This functionality allows to link target groups for promotional campaign created by the function Marketing of Google Analytics to the adaptability to different devices of Google ADS. This allows to show advertising based on the personal interests of the use, identified by means of an analysis of the user’s behavior on the website, either on a mobile device or on other devices. It is possible to disable permanently the targeting and remarketing functions by disabling the function “personalized advertising” on the Google account. For doing this, follow this link: https://www.google.com/settings/ads/onweb/. Personal data collected: Cookies and usage data. Place of processing: Ireland – Privacy Policy (https://policies.google.com/privacy?hl=en)

CONTENTS HOSTED ON EXTERNAL PLATFORMS

These services allow to display contents hosted on external platforms directly from this website pages and to interact with them. If a service for interaction with social networks is installed, the website may collect traffic data about the pages, even if users do not use the service.
This website uses

1. Google Maps
Google Maps is a map display service managed by Google that allows this website to integrate those contents within its own pages. Personal data collected: Cookies and usage data. Place of processing: Ireland – Privacy Policy (https://policies.google.com/privacy?hl=en)

2. Vimeo (Vimeo Inc.)
Vimeo is a video contents viewing service managed by Vimeo Inc. that allows this app to integrate those contents within its own pages. Personal data collected: Cookies and usage data. Place of processing: the USA – Privacy Policy (https://vimeo.com/privacy)

3. YouTube (Google Ireland Limited)
YouTube is a video contents viewing service managed by Google that allows this website to integrate such content within its pages. Personal data collected: Cookies and usage data. Place of processing: Ireland – Privacy Policy (https://policies.google.com/privacy?hl=en)

4. ISUU (Isuu Inc.)
Issuu is a realistic visualization service that allows to integrate digital documents into the website of the Data Controller. Personal Data collected: Cookies and Usage Data. Place of Processing: USA – Privacy Policy (https://issuu.com/legal/privacy)

5. FittingBox

PAYMENT MANAGEMENT

Payment processing services allow this website to process payments by credit card, bank transfer or other means. The data used for payment is acquired directly from the manager of the payment service requested without being in any way processed by this website. Some of these services may also allow for the scheduled sending of messages to the user, such as emails containing invoices or notifications regarding payment. This website uses the following services:

1. PayPal (Paypal Europe S.à.r.l. et Cie, S.C.A Inc.)
PayPal is a payment service provided by PayPal Europe S.à.r.l. et Cie, S.C.A Inc., that allows the user to make online payments using her/his own PayPal credentials. Personal data collected: Cookies and different kinds of data as specified in the privacy policy of the service. Place of processing: Luxembourg – Privacy Policy (https://www.paypal.com/it/webapps/mpp/ua/privacy-full)

2. Amazon pay (Amazon Payments UK Limited)
Amazon pay is a payment service provided by Amazon Payments UK Limited, that allows the user to make online payments using her/his own Amazon credentials. Personal data collected: Cookies and different kinds of data as specified in the privacy policy of the service. Place of processing: Luxembourg – Privacy Policy (https://pay.amazon.it/help/201751600)

3. Apple pay (Apple Inc.)
Apple Pay is a payment service provided by Apple, that allows the user to make online payments on websites and Apps that support it using an IPhone 6 and higher Apple Watch, Mac and iPad Air 2 and higher. Personal data collected: Cookies and different kinds of data as specified in the privacy policy of the service. Place of processing: California, the USA – Privacy Policy (https://www.apple.com/it/legal/privacy/)

4. Stripe (Stripe Payments Europe Ltd.)
Stripe is a payment service provided by Stripe Payments Europe, Ltd., that allows the user to make online donations or payments using her/his own Stripe credentials. Personal data collected: Cookies and different kinds of data as specified in the privacy policy of the service. Place of processing: the USA – Privacy Policy (https://stripe.com/it/privacy)

5. Satispay (Satispay Europe SA)
Satispay is a service that allows the user the digital payment and the cash transfer via internet. This service is provided by Satispay Europe SA. Personal data collected: different kinds of data as specified in the privacy policy of the service. Place of processing: Luxembourg – Privacy Policy (https://www.satispay.com/it-it/privacy/privacy-policy/)

6. Google Pay (Google Ireland Limited)
Google Pay is a payment service provided by Google Ireland Limited, that allows the user to make online payments using her/his own Google account. Personal data collected: Cookies and different kinds of data as specified in the privacy policy of the service. Place of processing: Ireland – Privacy Policy (https://policies.google.com/privacy?hl=en)

7. Klarna (Klarna Bank AB)
Klarna is a service that allows the data subject to deferred digital payment and transfer of money via the internet. This service is provided by Klarna Bank AB. Personal Data collected: Various types of Data as specified by the privacy policy of the service. Place of processing: Sweden – Privacy Policy (link to activate https://cdn.klarna.com/1.0/shared/content/legal/terms/0/it_it/privacy
8. BitPay (BitPay Inc.)
BitPay is a payment service provided by BitPay Inc. that allows the Data Subject to make online payments in bitcoin. Personal data collected: Cookies and various types of Data as specified by the privacy policy of the service. Place of processing: USA – Privacy Policy (https://bitpay.com/about/privacy)

8. BitPay (BitPay Inc.)
BitPay is a payment service provided by BitPay Inc. that allows the Data Subject to make online payments in bitcoin. Personal data collected: Cookies and various types of Data as specified by the privacy policy of the service. Place of processing: USA – Privacy Policy (https://bitpay.com/about/privacy)

Responsabile tecnico per il trattamento dei dati relativo a Google Analytics, AdWords, Facebook Ads, Facebook, Instagram, Active Campaign, Hotjar, Live Chat – Secret Key srl. Clicca qui per visionare la Privacy Policy

Changes to this Privacy Policy

The Data Controller reserves the right to make changes to this Privacy Policy at any time by giving notice to users on this page. Therefore, it is recommended to consult this page very often, taking as reference the date of last modification indicated at the bottom. In case of non-acceptance of the changes made to this Privacy Policy, the user is required to cease the use of this website and may request the Data Controller to remove their personal data. Unless otherwise specified, the previous Privacy Policy will continue to apply to personal data up to that date collected moment. The Data Controller is not responsible for the update of the links displayable in this Privacy Policy, therefore, every time a link does not work and/or is not updated, users acknowledge and accept that they must always refer to the document and/or the section of the linked websites.